Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Amazon DVA-C02 Exam - Topic 1 Question 65 Discussion

A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials.A developer needs to implement encrypted username and password credentials.Which solution will meet these requirements?
B) Move the user credentials from Lambda environment variables to AWS Systems Manager Parameter Store.
A) Remove the user credentials from the Lambda environment. Implement 1AM database authentication.
C) Move the user credentials from Lambda environment variables to AWS Key Management Service (AWS KMS).
D) Move the user credentials from the Lambda environment to an encrypted .txt file. Store the file in an S3 bucket.

Amazon DVA-C02 Exam - Topic 1 Question 65 Discussion

Actual exam question for Amazon's DVA-C02 exam
Question #: 65
Topic #: 1
[All DVA-C02 Questions]

A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials.

A developer needs to implement encrypted username and password credentials.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Kaitlyn
3 days ago
Option B is the best choice for secure storage!
upvoted 0 times
...
Samira
8 days ago
Definitely don't want to store credentials in plain text.
upvoted 0 times
...
Devon
14 days ago
Surprised they even considered a .txt file in S3!
upvoted 0 times
...
Ezekiel
19 days ago
But isn't KMS more secure than Parameter Store?
upvoted 0 times
...
Audra
24 days ago
I agree, Parameter Store is a solid solution!
upvoted 0 times
...
Shawn
29 days ago
Option B is the best choice for secure storage.
upvoted 0 times
...
Isabelle
1 month ago
I vaguely recall that IAM database authentication is more for database connections, so option A doesn't seem relevant for SFTP credentials.
upvoted 0 times
...
Olene
1 month ago
I practiced a similar question about securing credentials, and I think moving them to an encrypted file in S3 is not ideal because it still exposes them. So, option D feels risky.
upvoted 0 times
...
Arthur
1 month ago
I'm not entirely sure, but I think AWS KMS is more about encryption rather than storing credentials directly. So, option C might not be the best fit.
upvoted 0 times
...
Twila
3 months ago
I remember we discussed using AWS Systems Manager Parameter Store for securely storing sensitive information like credentials. It seems like option B could be the right choice.
upvoted 0 times
...

Save Cancel